Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38362e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          FweU1FggyPKIAijE0w0RHFqu1DGA4UmZgXY+TvafXqc=
Subject key identifier:   4E:FF:C0:C7:E7:E1:2C:A0:42:70:E2:42:BF:5E:5B:D8:A1:DF:17:74
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       0BFA3A34E81F5E692600F1843635F15CC31C9E6D
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:07 +0000
ROA not before:           Thu 05 Feb 2026 00:24:07 +0000
ROA not after:            Thu 04 Feb 2027 00:29:07 +0000
asID:                     52653
IP address blocks:        177.221.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fa:3a:34:e8:1f:5e:69:26:00:f1:84:36:35:f1:5c:c3:1c:9e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:07 2026 GMT
            Not After : Feb  4 00:29:07 2027 GMT
        Subject: CN=4EFFC0C7E7E12CA04270E242BF5E5BD8A1DF1774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:76:27:7e:e3:0e:a9:82:e1:6e:5d:e2:2f:
                    7c:9a:8d:27:c0:6f:c8:76:12:b1:a0:f8:7a:69:fd:
                    2d:83:e6:f2:ec:aa:6a:3f:00:c3:fb:b9:ef:ed:25:
                    c5:3e:ea:2f:a6:f1:e8:6e:66:a6:1f:3f:a9:51:07:
                    89:3b:82:a3:1b:86:e6:06:7b:85:2e:c7:51:94:02:
                    88:13:d9:eb:ba:ec:0c:b9:fb:b1:86:72:1b:0f:20:
                    2e:43:fa:a1:5f:96:5a:9c:c7:6e:0b:97:cf:a4:f0:
                    bb:60:f1:03:28:fb:a2:f7:f4:de:f0:29:4b:1c:60:
                    2a:b9:f4:a1:ba:84:1c:d5:9c:59:dd:08:df:52:e2:
                    92:8a:b3:75:44:16:8a:0a:8f:1f:6b:c1:58:93:f4:
                    dd:d4:13:7f:00:3f:15:e5:61:3b:9c:19:b4:3a:96:
                    ee:a6:61:85:3a:31:79:35:ee:5b:86:ae:bc:5e:9c:
                    3d:6f:2c:a3:1c:b7:02:bd:dc:db:ff:5a:b8:5c:3e:
                    e7:b6:c8:b0:24:23:6d:8e:4c:7f:c7:1f:07:27:06:
                    ca:18:c6:db:13:d1:1a:ea:74:74:b9:cc:15:6c:df:
                    f2:38:51:13:d7:37:79:f9:6f:09:46:1d:78:f6:13:
                    7b:1b:d1:4d:ce:aa:19:bc:37:23:f9:46:13:f9:6a:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FF:C0:C7:E7:E1:2C:A0:42:70:E2:42:BF:5E:5B:D8:A1:DF:17:74
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38362e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:8d:46:30:5b:74:c5:d7:3b:95:57:74:e7:c7:3d:70:7a:
         5e:ab:e7:dc:a8:07:a5:87:37:85:77:01:7e:44:6e:24:05:bc:
         fd:24:a4:35:c6:e9:7b:ef:86:18:bb:a2:4e:60:e9:8a:2a:a6:
         9d:31:ae:a7:94:d3:62:1b:e3:98:c9:14:c3:da:9f:c5:ac:18:
         64:99:a7:8e:cc:20:75:1e:f3:89:29:00:10:2b:4b:ef:2f:85:
         54:6a:eb:ac:44:f3:52:b6:b4:1d:85:bb:c1:4f:56:ca:40:e2:
         86:cf:0b:4d:3e:b5:79:28:5b:f8:28:f0:45:3b:4c:24:52:2e:
         2d:34:d3:78:d5:6e:21:9b:02:72:39:22:6c:ed:71:94:45:70:
         15:79:ec:35:3e:4f:44:52:bf:57:f2:66:fa:f3:c7:73:36:ab:
         89:c0:c1:e5:03:84:6c:30:20:4b:24:dc:81:4a:12:8f:cb:7d:
         ae:0f:8c:cc:82:88:eb:f9:63:b9:9f:45:aa:5c:47:8d:cc:1e:
         18:18:63:c6:8b:e8:9b:07:99:7b:af:dd:35:06:9e:73:c5:28:
         19:d7:90:8b:0e:eb:70:36:52:2d:94:bf:11:89:ad:ad:1f:8c:
         5c:8b:62:f8:ef:a4:23:87:ec:ea:3d:bf:e4:da:47:38:0d:85:
         2f:86:09:cb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC/o6NOgfXmkmAPGENjXxXMMcnm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNjAyMDUwMDI0MDdaFw0yNzAyMDQwMDI5MDdaMDMxMTAvBgNV
BAMTKDRFRkZDMEM3RTdFMTJDQTA0MjcwRTI0MkJGNUU1QkQ4QTFERjE3NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZnYnfuMOqYLhbl3iL3yajSfA
b8h2ErGg+Hpp/S2D5vLsqmo/AMP7ue/tJcU+6i+m8ehuZqYfP6lRB4k7gqMbhuYG
e4Uux1GUAogT2eu67Ay5+7GGchsPIC5D+qFfllqcx24Ll8+k8Ltg8QMo+6L39N7w
KUscYCq59KG6hBzVnFndCN9S4pKKs3VEFooKjx9rwViT9N3UE38APxXlYTucGbQ6
lu6mYYU6MXk17luGrrxenD1vLKMctwK93Nv/WrhcPue2yLAkI22OTH/HHwcnBsoY
xtsT0RrqdHS5zBVs3/I4URPXN3n5bwlGHXj2E3sb0U3Oqhm8NyP5RhP5aiDrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTv/Ax+fhLKBCcOJCv15b2KHfF3QwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsd1WMA0GCSqGSIb3DQEBCwUAA4IBAQAtw41GMFt0
xdc7lVd058c9cHpeq+fcqAelhzeFdwF+RG4kBbz9JKQ1xul774YYu6JOYOmKKqad
Ma6nlNNiG+OYyRTD2p/FrBhkmaeOzCB1HvOJKQAQK0vvL4VUauusRPNStrQdhbvB
T1bKQOKGzwtNPrV5KFv4KPBFO0wkUi4tNNN41W4hmwJyOSJs7XGURXAVeew1Pk9E
Ur9X8mb688dzNquJwMHlA4RsMCBLJNyBShKPy32uD4zMgojr+WO5n0WqXEeNzB4Y
GGPGi+ibB5l7r901Bp5zxSgZ15CLDutwNlItlL8Ria2tH4xci2L476Qjh+zqPb/k
2kc4DYUvhgnL
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:38 2026 by rpki-client